Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

COBIT (Control Objectives for Information and Related Technology) is an IT governance framework developed by ISACA. It is specifically designed to help organizations align their IT strategies with business objectives. It achieves this by providing a comprehensive model that links business goals to IT goals, and IT processes to specific control objectives. This structure allows managers to effectively govern and manage enterprise IT by bridging the gap between high-level business risks, technical implementation details, and control requirements, ensuring that IT investments support business needs while managing risk.

B. COSO is a broader enterprise risk management (ERM) framework focused on internal controls and financial reporting, not specifically IT governance.
C. PCI DSS is a compliance standard with specific security controls for protecting cardholder data, not a comprehensive IT governance framework.
D. ITIL is a framework for IT Service Management (ITSM), focusing on the processes for delivering IT services, not overall IT governance.

1. ISACA. (2018). COBIT 2019 Framework: Introduction and Methodology. "COBIT is a framework for the governance and management of enterprise information and technology (I&T), aimed at the whole enterprise... COBIT defines the components to build and sustain a governance system... and helps to bridge the gap among control requirements, technical issues and business risks." (p. 9).

2. De Haes, S., & Van Grembergen, W. (2015). Enterprise Governance of Information Technology: Achieving Alignment and Value, Featuring COBIT 5. Springer. Chapter 2, "The Need for Enterprise Governance of IT," discusses how frameworks like COBIT provide the structure to connect business strategy with IT execution and risk management.

3. Tjoa, S., et al. (2016). Information Security and IT-Governance: A comparison of COBIT 5 and ISO/IEC 27001. In Proceedings of the 18th International Conference on Enterprise Information Systems. DOI: 10.5220/0005778603150322. This paper compares frameworks and highlights COBIT's role in bridging business and IT perspectives.